Change Details

The list of usernames is public, so it would be useful to do client-side validation of usernames on the password reset screen. This is similar to the same bug 17544, bug 34447, and bug 47685. It is not public which emails are in use, so we should not reveal that in any way (the current password reset interface does not either). -------------------------- **Version**: 1.22.0 **Severity**: normal **See Also**: https://bugzilla.wikimedia.org/show_bug.cgi?id=40040 https://bugzilla.wikimedia.org/show_bug.cgi?id=17544

The list of usernames is public, so it would be useful to do client-side validation of usernames on the password reset screen. This is similar to the same bug 17544, bug 34447, and bug 47685. It is not public which emails are in use, so we should not reveal that in any way (the current password reset interface does not either). -------------------------- **Version**: 1.22.0 **Severity**: normal **See Also**: T42040 T19544

The list of usernames is public, so it would be useful to do client-side validation of usernames on the password reset screen. This is similar to the same bug 17544, bug 34447, and bug 47685. It is not public which emails are in use, so we should not reveal that in any way (the current password reset interface does not either). -------------------------- **Version**: 1.22.0 **Severity**: normal **See Also**: https://bugzilla.wikimedia.org/show_bug.cgi?id=40040 https://bugzilla.wikimedia.org/show_bug.cgi?id=17544 T42040 T19544